There's a few other reasons:
- Error rate - false accepts and false rejects are still unacceptably high for many types of biometrics.
- User acceptance - still not widely trusted by users - the various privacy concerns are still quite high, and the idea that a part of your body is now a security mechanism is somewhat freaky for some folks.
Security best practices these days (like the CISSP certification's baseline for security practices) don't point towards Biometrics being the end-all, be-all for security. The best practice is to build a system with a collection of authentication mechanisms that are appropriate for the system, the information in it, the expected threats and vulnerabilities, and the ways that the system must be used.
I don't know that anyone could say beyond doubt what the "state of the nation" is - that's a pretty broad assertion. But I can say that common best practices don't currently force biometrics as a one size fits all solution. I'd say, at best, they are something that is still under development and treated with a certain amount of dubiousness.